Trusted Design

InstantAccess Malware

概要

InstantAccess Malware hitting my net. Classified as a Trojan but having trouble determining how the queries are being started. Possible malicious redirect from another website. Reference is based off a hash, but I do not see that hash on my net. A few IP Addresses, mostly hosted by confluence-networks.com. I searched the IPs for associated domains and it all seems to be garbage spam/parked domains. The signatures to look for in the URL would include: /sk-logabpstatus.php?a= /sk-logabpstatus.php?b= List of domains are posted on the pastebin reference, and images are posted on my twitter. I searched these IPs on my net and the logs all show junk traffic. VirusTotal reference is for a new file only 4-5 days ago.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Malware issuing domains (score: 0.66)
• Hosts Dropping exploit kit via double encoded javascript (score: 0.64)
• Malware hosted on Facebook CDN (score: 0.63)
• Tinba alias Tiny Banker Indicators (score: 0.62)
• Suspicious IP addresses (score: 0.62)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る